Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa
File:                     326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (raw, json)
Hash identifier:          dzEa0L/2TNtrPjS4GtC9lmUT0lsCAKJDRUVUxob6Upc=
Subject key identifier:   C8:60:D2:06:61:DC:15:CB:C5:2E:13:91:F0:78:43:C2:E8:8F:E2:C9
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       63E35DE278999578A4C780839BF2EAF4DFE57E6F
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa
Signing time:             Tue 14 Mar 2023 20:22:52 +0000
ROA not before:           Tue 14 Mar 2023 20:17:52 +0000
ROA not after:            Tue 12 Mar 2024 20:22:52 +0000
asID:                     202076
IP address blocks:        2a11:f2c0:fc00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e3:5d:e2:78:99:95:78:a4:c7:80:83:9b:f2:ea:f4:df:e5:7e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: Mar 14 20:17:52 2023 GMT
            Not After : Mar 12 20:22:52 2024 GMT
        Subject: CN=C860D20661DC15CBC52E1391F07843C2E88FE2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:77:10:f1:76:82:32:09:8b:c6:89:60:14:
                    da:fa:bb:b5:3b:53:a1:48:fe:29:ab:15:ec:d6:e9:
                    5b:8b:17:67:3f:c3:92:ec:82:8b:fb:86:6d:9f:8e:
                    a1:f4:c2:5a:fb:93:7f:a6:b9:29:71:23:f5:71:a1:
                    e7:ce:90:e6:b9:78:7d:3e:ab:eb:47:cb:f7:2b:68:
                    76:75:71:75:94:17:31:c8:3d:74:bf:f0:53:eb:3a:
                    bf:dc:2d:79:61:0e:b5:9e:47:3a:72:39:4d:96:57:
                    11:b4:ee:d6:f7:a0:ad:ae:4d:a7:4a:60:a0:86:22:
                    a2:a8:a8:ee:1b:3f:66:c0:80:ed:c0:cf:4f:71:d3:
                    cb:d1:e7:c3:a8:1c:f9:a2:89:f2:cd:9e:13:73:fd:
                    8f:e9:a8:99:0a:4b:0a:3e:51:13:83:63:ba:b2:15:
                    e0:e5:c7:bd:c2:b7:0b:8f:84:74:4e:b0:e3:f9:61:
                    d4:2a:75:e8:f9:ea:f2:bb:21:f8:a6:9d:7f:4a:ee:
                    ec:7f:4d:be:fe:33:e1:18:2b:60:9f:e4:3f:af:8f:
                    3f:21:5b:80:a4:93:dd:65:84:2f:69:cc:1c:89:de:
                    5f:6a:e9:61:39:08:c8:6e:9f:9e:28:61:7c:18:43:
                    53:ff:f0:82:18:44:4e:56:55:aa:e3:4e:68:8e:67:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:60:D2:06:61:DC:15:CB:C5:2E:13:91:F0:78:43:C2:E8:8F:E2:C9
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:bf:69:1a:db:0d:37:56:25:66:e4:e0:6d:85:04:19:fe:e7:
         53:cd:e8:ac:b2:5a:e5:c6:c1:17:ae:47:73:6a:58:da:3e:d7:
         c5:fb:3c:0e:45:3b:b9:35:41:c9:bd:3a:1d:6d:8a:3b:48:98:
         49:8a:08:d0:7c:b8:09:ff:86:27:04:e4:64:eb:42:96:58:ed:
         00:1b:c6:33:87:02:52:32:41:7a:a7:27:df:0f:3f:4d:76:50:
         df:e5:6d:45:16:e0:11:3f:dd:b3:e4:a9:1a:5f:3f:04:f2:1b:
         b3:11:44:a7:3d:a9:8e:d8:85:c5:f1:b5:a4:9e:ec:9a:c2:13:
         68:bd:d0:31:eb:8a:cf:9c:aa:c0:a7:9c:88:00:68:e3:b0:7f:
         4a:31:04:3d:db:fe:0d:97:ff:d6:b8:62:2a:1a:01:68:16:05:
         97:f2:1d:d4:b1:fc:8b:cd:1d:81:11:d2:06:70:4a:30:44:91:
         9a:3c:75:34:a8:c1:f5:fc:d3:a9:32:a8:80:7c:ad:d8:ec:7d:
         64:85:53:f3:ca:10:88:2b:9b:bd:56:ba:ca:27:76:33:73:18:
         d2:0e:63:26:d6:fe:35:ba:63:8b:87:14:96:41:d8:4f:eb:72:
         3b:a5:3d:c7:15:fd:8f:69:0c:a1:15:b2:ce:00:eb:c1:77:b9:
         58:9c:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----